In the Linux kernel, the following vulnerability has been resolved:
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 4.14.303 | 4.14.316 |
| linux / linux_kernel | 4.19.270 | 4.19.284 |
| linux / linux_kernel | 5.4.229 | 5.4.244 |
| linux / linux_kernel | 5.10.163 | 5.10.181 |
| linux / linux_kernel | 5.15.87 | 5.15.113 |
| linux / linux_kernel | 5.16 | 6.1.30 |
| linux / linux_kernel | 6.2 | 6.3.4 |